Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
File: XpgU1DFdMK28jeMGAFVq6cPPns4.mft (raw, json)
Hash identifier: aqtE4OPpZYlOo8U8LaFdXyhDpNA+wgzcPPmjYx4YH8s=
Subject key identifier: 40:F9:0B:CA:4A:CF:73:59:7B:8A:0B:7C:37:61:D1:22:8F:18:76:EF
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Certificate issuer: /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial: 01A0DA287C2CA171AD6EC4EBE573A84632BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 20:01:21 +0000
Manifest this update: Fri 25 Sep 2026 20:01:21 +0000
Manifest next update: Sat 26 Sep 2026 20:01:21 +0000
Files and hashes: 1: QBinzFbTX8ICJKPb335BTjaNXKk.roa (hash: phGs/IfWO4O9NiG9zthPXCYOMupHdBQa3yN7pRaGe2k=)
2: XpgU1DFdMK28jeMGAFVq6cPPns4.crl (hash: oMztTp/f2zL9nP4RskJWZm3bDlEEN8hzfRrtwXa1QDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:7c:2c:a1:71:ad:6e:c4:eb:e5:73:a8:46:32:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Validity
Not Before: Sep 25 20:01:21 2026 GMT
Not After : Sep 26 20:01:21 2026 GMT
Subject: CN=40f90bca4acf73597b8a0b7c3761d1228f1876ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:94:dc:e1:53:10:b1:31:b2:28:df:87:80:df:
12:fd:d8:68:f1:7a:0f:25:a2:8a:7b:f0:73:41:42:
83:8d:0d:23:36:4e:0d:30:8d:af:da:05:cc:38:27:
20:8c:1b:c1:da:64:98:ac:8a:8e:dd:b0:27:a5:24:
40:63:b1:11:8d:1b:30:99:7f:15:f3:18:9d:44:2e:
b4:8b:46:ce:2d:99:2c:4b:21:4f:34:da:88:a9:19:
4a:bb:f0:c0:1a:5b:77:22:17:d4:57:ec:fd:e3:42:
f1:57:e0:4c:15:5a:0d:af:b3:01:00:49:53:9f:a8:
81:5c:aa:63:8c:ba:db:12:89:8f:ae:f4:12:93:d7:
6c:91:6c:69:27:0d:e9:14:d9:56:71:0c:28:50:6f:
ce:3b:a9:57:bb:cd:e9:02:b3:aa:69:2d:93:84:ea:
82:7d:f6:dc:c8:69:71:1e:71:c9:02:1a:32:48:c4:
d3:62:93:d5:f8:32:b1:1e:56:02:11:00:20:85:6b:
b3:4c:26:16:96:4d:53:1e:7f:52:84:46:4a:9a:fd:
8b:44:02:bb:ed:ea:d1:48:39:70:4a:05:5b:bd:74:
66:9d:82:68:7f:4f:29:99:aa:c3:5c:51:e6:30:73:
01:68:e6:3f:6a:13:c3:f5:3c:43:a5:46:02:b9:6f:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:0B:CA:4A:CF:73:59:7B:8A:0B:7C:37:61:D1:22:8F:18:76:EF
X509v3 Authority Key Identifier:
keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7e:44:a8:28:61:bf:fa:43:81:b8:a1:d7:6f:95:f6:70:16:
75:b1:50:f3:16:d8:42:39:01:7d:2c:18:94:dd:c3:76:48:91:
c4:ba:f1:fe:24:44:b4:bf:95:db:1f:cd:e5:5e:93:e4:35:6e:
2f:74:52:ae:4e:d7:cd:b4:41:99:93:b0:a7:c3:0e:ad:c0:4c:
39:ed:2b:55:2c:f5:3b:38:bc:bd:2f:fa:db:df:78:72:e5:b9:
fa:b2:90:71:85:d4:bd:05:21:79:a8:52:31:d5:21:fd:0f:19:
39:8c:e4:4c:7d:53:bd:c8:ff:ba:09:38:9c:76:d9:25:fe:48:
eb:32:20:ca:78:6a:8b:2f:19:fc:30:88:bc:fd:bf:d4:91:4b:
a1:2c:96:34:1f:96:e4:cc:3a:a8:bc:2b:1b:89:15:eb:b5:67:
fd:93:e5:7c:1b:57:23:ec:96:38:30:4e:ea:06:8a:67:bc:d3:
9c:e8:ee:d9:20:f5:a1:95:3d:fc:aa:7e:48:8f:83:04:69:a7:
16:a4:5a:c8:96:c1:05:a7:60:fb:c5:77:1e:56:35:40:a6:09:
0d:59:de:b9:b0:6f:54:b0:f0:3a:8e:db:b6:ed:a1:07:05:f6:
69:e4:4e:e8:72:4f:95:d5:c2:b8:c5:fa:e8:7c:cb:40:e4:5e:
fe:e5:56:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKHwsoXGtbsTr5XOoRjK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTgxNGQ0MzE1ZDMwYWRiYzhkZTMwNjAwNTU2YWU5YzNj
ZjllY2UwHhcNMjYwOTI1MjAwMTIxWhcNMjYwOTI2MjAwMTIxWjAzMTEwLwYDVQQD
Eyg0MGY5MGJjYTRhY2Y3MzU5N2I4YTBiN2MzNzYxZDEyMjhmMTg3NmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JTc4VMQsTGyKN+HgN8S/dho8XoP
JaKKe/BzQUKDjQ0jNk4NMI2v2gXMOCcgjBvB2mSYrIqO3bAnpSRAY7ERjRswmX8V
8xidRC60i0bOLZksSyFPNNqIqRlKu/DAGlt3IhfUV+z940LxV+BMFVoNr7MBAElT
n6iBXKpjjLrbEomPrvQSk9dskWxpJw3pFNlWcQwoUG/OO6lXu83pArOqaS2ThOqC
ffbcyGlxHnHJAhoySMTTYpPV+DKxHlYCEQAghWuzTCYWlk1THn9ShEZKmv2LRAK7
7erRSDlwSgVbvXRmnYJof08pmarDXFHmMHMBaOY/ahPD9TxDpUYCuW8ZVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED5C8pKz3NZe4oLfDdh0SKPGHbvMB8GA1UdIwQY
MBaAFF6YFNQxXTCtvI3jBgBVaunDz57OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBnVTFERmRNSzI4amVNR0FGVnE2Y1BQbnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83YTc4ZDQtMDM0MC00MjI3LWIxNDct
MzViNTNkMjM3NmQyLzEvWHBnVTFERmRNSzI4amVNR0FGVnE2Y1BQbnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83YTc4ZDQtMDM0MC00MjI3LWIxNDctMzViNTNkMjM3NmQy
LzEvWHBnVTFERmRNSzI4amVNR0FGVnE2Y1BQbnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPX5EqChh
v/pDgbih12+V9nAWdbFQ8xbYQjkBfSwYlN3DdkiRxLrx/iREtL+V2x/N5V6T5DVu
L3RSrk7XzbRBmZOwp8MOrcBMOe0rVSz1Ozi8vS/62994cuW5+rKQcYXUvQUheahS
MdUh/Q8ZOYzkTH1Tvcj/ugk4nHbZJf5I6zIgynhqiy8Z/DCIvP2/1JFLoSyWNB+W
5Mw6qLwrG4kV67Vn/ZPlfBtXI+yWODBO6gaKZ7zTnOju2SD1oZU9/Kp+SI+DBGmn
FqRayJbBBadg+8V3HlY1QKYJDVneubBvVLDwOo7btu2hBwX2aeRO6HJPldXCuMX6
6HzLQORe/uVWXA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:02:40 2026 by rpki-client